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What is claimed is: 

CLAIMS 

1 . A metiiod for producing at least one ciphertext block from at least 

5 one plaintext block using a block cipher E and a key K, the method comprising: 
receiving n plaintext blocks, wherein n is an integer greater than 0; 

setting Qo equal to an initial value; and 

for each plaintext block of the n plaintext blocks: 

computing Qi ~ £^k( Qi-l) Pi ; and 

10 computing Q = M(Pi , Qi) , 

thereby producing n ciphertext blocks, 
wherein: 

0 < i <= n, and 

Pi denotes an i - th plaintext block of tiie n plaintext blocks, and 
1 5 Ci denotes an i - th ciphertext block of the n ciphertext blocks, and 

M is a selector function which, for each bit Cy of block Cp 
selects a first argument of M if bit Pij is not to be encrypted, and selects a second 
argument of M if bit Pij is to be encrypted. 
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2. The method according to claim 1 and wherein M is chosen in 
accordance with a standard indicating bits that are not to be encrypted. 

3. The method according to claim 2 and wherein the standard 
5 comprises one of the following: an audio standard; a video standard; and an 

audio-video standard. 

4. The method according to claim 3 and wherein the standard 
comprises MPEG-2. 

10 

5. A method for producing at least one ciphertext block from at least 
one plaintext block using a block cipher E and a key jK, the method comprising: 

receiving n plaintext blocks, wherein n is an integer greater than 0, 
and an initial value 7F; 

15 computing IV' = M(Pi ,IV) ; 

computing Qo ~ : and 

for each plaintext block of the n plaintext blocks: 

computing Qi = Ek( Qui) XOR Pi ; and 

computing Q = M(Pi , Qj) , 

20 thereby producing n ciphertext blocks, 
wherein: 

0 < i <= n, and 
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His a hash function, and 

jP/ denotes an i - th plaintext block of the n plaintext blocks, and 
CJj denotes an i - th ciphertext block of the n ciphertext blocks, and 
is a selector function which, for each bit Cfj of block Cp 
5 selects a first argument of M if bit Pfj is not to be encrypted, and selects a second 
argument of M if bit JPy is to be encrypted. 

6. The method according to claim 5 and wherein H comprises SHAl . 

10 7. The method according to claim 5 and wherein H(IV^) comprises 

Ek(IV') xor iv\ 

8- The method according to any of claims 5-7 and wherein M is 

chosen in accordance with a standard indicating bits that are not to be encrypted. 

15 

9. The method according to claim 8 and wherein the standard 

comprises one of the following: an audio standard; a video standard; and an 
audio-video standard. 
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10. The method according to claim 9 and wherein the standard 
comprises MPEG-2. 

11. In a method for producing at least one ciphertext block from at least 
5 one plaintext block using a block cipher E and a key in a stream mode, wherein 

Pi denotes an i - th plauitext block, and C/ denotes an i - th ciphertext block, an 

improvement comprising: 

for each bit Cy of block Cp selecting -Py as an output if bit jPy 

is not to be encrypted. 

10 

12. The method according to claim 11 and wherein the stream mode 
comprises CFM mode. 

13. Apparatus for producing at least one ciphertext block from at least 
15 one plaintext block using a block cipher E and a key the at least one plaintext 

block comprising n plaintext blocks, the at least one ciphertext block comprising n 
ciphertext blocks, wherein n is an integer greater than 0, the apparatus comprising: 

an initialization unit for setting Qq equal to an initial value; and 

a computation unit operative, for each plaintext block of the n 
20 plaintext blocks: 

to compute O/ = ErciQi^i) XOR Pi ; and 

to compute Q = M(Pi ,Qi) , 
26 
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wherein: 

0 < i <= n, aad 

Pi denotes an i - th plaintext block of the n plaintext blocks, and 
Ci denotes an i - th ciphertext block of the n ciphertejd blocks, and 
5 M \s 2L selector function which, for each bit Cy of block Cp 

selects a first argument of ikf if bit Pfj is not to be encrypted, and selects a second 
argument of Af if bit Py is to be encrypted. 

14. Apparatus for producing at least one ciphertext block from at least 

10 one plaintext block using a block cipher E, a key and an initial value IV, the at 
least one plaintext block comprising n plaintext blocks, the at least one ciphertext 
block comprising n ciphertext blocks, wherein n is an integer greater than 0, the 
apparatus comprising: 

a first computation unit for computing /F^^ — M(P j ,IV) \ 

15 a second computation unit for computing Qq ~ H(IV ^) ; and 

a third computation unit operative, for each plaintext block of the n 
plaintext blocks: 

to compute Qi = Ek( Qi-l) XOR Pi ; and 
to compute Cf — M(Pi , Qf) , 
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wherein: 

0 < i <= n, and 

His a hash function, and 

Pi denotes an i - th plaintext block of the n plaintext blocks, and 
5 Ci denotes an i - th ciphertext block of the n ciphertext blocks, and 

M is a selector function which, for each bit Cy of block Cp 
selects a first argument of M if bit Py is not to be encrypted, and selects a second 
argument of M if bit P^j is to be encrypted. 

10 15. In apparatus for producing at least one ciphertext block from at least 

one plaintext block using a block cipher E and a key iST in a stream mode, wherein 

Pi denotes an i - 1h plaintext block, and Ci denotes an i - th ciphertext block, an 

in:q)rovement comprising: 

a selector unit operative, for each bit of block C/, to select jP/^- 

15 as an output if bit Pij is not to be encrypted. 

16. A method for producing at least one plaintext block from at least 

one ciphertext block encrypted using a block cipher E and a key K, the method 
comprising: 
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receiving n ciphertext blocks, where n is an integer greater than 0; 

setting Qq equal to an initial value; and 

for each ciphertext block of the n ciphertext blocks: 

computing O \ = Eic( Qui) XOR Ci ; 

computingPf = M(Ci , Q'l) ;3xid 

computing Qf —M(Q i , Ci) , 

thereby producing n plaintext blocks, 
wherein: 

0 < i <= n, and 

Pi denotes an i - Ih plaintext block of the n plaintext blocks, and 
Ci denotes an i - th ciphertext block of the n ciphertext blocks, and 
M is a selector function which, for each bit Cij of block Cp 

selects a first argument of ii/ if bit Py is not encrypted, and selects a second 

argument of M if hit Pij is encrypted. 

17. The method according to claim 16 and wherein M is chosen in 

accordance with a standard indicating bits that are not encrypted. 
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18. The method according to claim 17 and wherein flie standard 

comprises one of the following: an audio standard; a video standard; and an 
audio-video standard. 

5 19. The method according to claim 18 and wherein the standard 

comprises MPEG-2. 

20. A method for producing at least one plaintext block from at least 

one ciphertext block using a block cipher E and a key the method cotnprisiag: 
10 receiving n ciphertext blocks, wherein n is an integer greater than 0, 

and an initial value IV; 

computing 

IV' = M(Pj ,IV) ; 

computing Qq — H(IV') ; and 

for each ciphertext block of the n ciphertext blocks: 
15 computing Q — E^fQ^^jJ XOR Cf, 

computing jP/ = M(Ci , Q^i); and 

computmg Qi =M( Q \ , Cj) , 

thereby producing n plaintext blocks, 
wherein: 

20 0 < i <= n, and 

J7 is a hash function, and 
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Pi denotes an i - th plaintext block of the n plaintext blocks, and 
Ci denotes an i - th ciphertext block of the n ciphertext blocks, and 
M is a selector function which, for each bit Cy of block 
selects a first argument of M if bit Py is not encrypted, and selects a second 
5 argument of Af if bit Pfj is encrypted. 

2 1 . The method according to claim 20 and wherein H comprises SHAl . 

22. The method according to claim 20 and wherein H(IV') 
10 comprises Ek(IV')XORIV\ 

23. The method according to any of claims 20 - 22 and wherein M is 
chosen in accordance with a standard indicating bits that are not encrypted. 

15 24. The method according to claim 23 and wherein the standard 

comprises one of the following: an audio standard; a video standard; and an 
audio-video standard 

25. The method according to claim 24 and wherein the standard 

20 comprises MPEG-2. 
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26. Li a method for producing at least one plaintext block from at least 

one ciphertext block using a block cipher E and a key iS: in a stream mode, wherein 

JPi denotes an i - th plaintext block of the plurality of plaintext blocks, and 

5 denotes an i - th ciphertext block of the plurality of ciphertext blocks, an 
improvement comprising: 

for each bit Pfj of block JP/ , selecting Cy as an output if bit 
is not encrypted 

10 27. The method according to claim 26 and wherein the stream mode 

comprises CFM mode. 

28. Apparatus for producing at least one plaintext block from at least 

one ciphertext block encrypted using a block cipher E and a key K, the at least one 
15 ciphertext block comprising n ciphertext blocks, the at least one plaintext block 
comprising n plaintext blocks, wherein n is an integer greater than 0, the apparatus 
comprising: 

initialization apparatus for setting Qq equal to an initial value; and 

a computation unit operative, for each ciphertext block of the n 
20 ciphertext blocks: 

to compute O \ = Ek( Qui) JCOR Cf ; 
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to compute^/ — M( Ci , Q i) ; and 
to compute Qi —M( Q \ y (Jf) , 

wherein: 

0 < i <= n, and 

jPj denotes an i - th plaintext block of the n plaintext blocks, and 
(Ji denotes an i - th ciphertext block of the n ciphertext blocks, and 
M is a selector function which, for each bit Cy of block Cp 

selects a first argument of M if bit JPij is not encrypted, and selects a second 

argument of M if bit is encrypted. 

29. Apparatus for producing at least one plaintext block from at least 

one ciphertext block using a block cipher E and a key K, the at least one ciphertext 
block comprising n ciphertext blocks, the at least one plaintext block comprising n 
plaintext blocks, wherein n is an integer greater than 0, the apparatus comprising: 

a first computation unit for computing IV — M(Pi fIV) ; 

a second computation unit for computing Qq — H(IV ; and 

a third computation unit operative, for each ciphertext block of the n 
ciphertext blocks: 

to compute O \ = EsfQiJ XOR C/; 
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to compute JPf — M(Ci , Q^i)\ and 
to compute Qi Q \ , , 

wherein: 

0 < i <= n, and 
3 ^is a hash iimction, and 

Pi denotes an i - th plaintext block of the n plaintext blocks, and 
Ci denotes an i - th ciphertext block of the n ciphertext blocks, and 
Af is a selector function which, for each bit Cy of block Cp 
selects a first argument of if bit Py- is not encrypted, and selects a second 
1 0 argument of M if bit Py is encrypted 

30. In apparatus for producing at least one plaintext block from at least 

one ciphertext block using a block cipher E and a key iC in a stream mode, wherein 

Pi denotes an i - th plaintext block of the plurality of plaintext blocks, and C7j 

15 denotes an i - th ciphertext block of the plurality of ciphertext blocks^ an 
improvement comprising: 

a selector unit operative, for each bit Py of block Pi , to select 
Cij as an output if bit Cy is not encrypted. 
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